CVE-2004-0916: Medium severity cabextract project cabextract vulnerability
Published Nov 19, 2004
·Updated
Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.
Affected Software
3 affected components
Cabextract Project Cabextract=0.2
Cabextract Project Cabextract=0.6
Cabextract Project Cabextract=1.0
Remediation
Patch Available
Patch Available
Event History
Nov 19, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0916?
CVE-2004-0916 is considered a high severity vulnerability due to its potential for remote file overwriting.
2
How do I fix CVE-2004-0916?
To fix CVE-2004-0916, upgrade cabextract to version 1.1 or later to mitigate the directory traversal vulnerability.
3
What are the affected versions of cabextract in CVE-2004-0916?
CVE-2004-0916 affects cabextract versions 0.2, 0.6, and 1.0.
4
Can CVE-2004-0916 be exploited remotely?
Yes, CVE-2004-0916 can be exploited remotely by attackers using specially crafted cabinet files containing dot dot sequences.
5
What type of vulnerability is CVE-2004-0916?
CVE-2004-0916 is a directory traversal vulnerability that allows unauthorized file access.